Login function needed in rest-client

Bug #600780 reported by Anna SdG
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
GNU Mailman
New
Undecided
Unassigned

Bug Description

For a good, working Mailman 3.0 UI we have to handle the passwords for each user (needed when they subscribe/unsubscribe/want to access their settings page but also for the admins and listowners). Hence, we need to implement the possibility to check for passwords in the rest-client (I believe these are saved in the user table in the core DB) and/or a login function.
We should probably use https for the psw authentication.

Revision history for this message
Anna SdG (anna-granudd) wrote :

Or well, we need to implement this functionality to the rest-server to be able to implement it in the rest-client.

Revision history for this message
Adam McGreggor (adam-amyl) wrote : Re: [Bug 600780] [NEW] Login function needed in rest-client

On Thu, Jul 01, 2010 at 07:33:47PM -0000, Anna wrote:
> We should probably use https for the psw authentication.

*ouch*. I'd really prefer that to be something configurable. I don't
particularly want to run lists stuff over SSL.

--
"I only can properly enjoy carol services if I am having an
  illicit affair with someone in the congregation. Why is this?
  Perhaps because they are essentially pagan, not Christian, celebrations."
  (Alan Clark's 'Diaries')

Revision history for this message
Anna SdG (anna-granudd) wrote :

Hm, you might be right... I was just worried about security when sending the password between the rest-client and the server. Making it configurable would also be nice for debugging.

Revision history for this message
Barry Warsaw (barry) wrote :

Even though this bug came first, I'm marking it as a duplicate of the later bug. Sorry about that.

I think the approach outlined in the duplicate should work for Postorius (the web ui).

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.